2024-09-08_00b612795ede35d052ad31adb229ab02_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-08_00b612795ede35d052ad31adb229ab02_icedid
Size

1.8MB
MD5

00b612795ede35d052ad31adb229ab02
SHA1

69fa92930654d881c7fdf036af1482c5c8274975
SHA256

2d5c13ba16577f54a95e17ea719cd7b978e28ba2855fd8ed5aa333cf97d8ee0a
SHA512

8097f4fd444fe2d97f9c1ca6a307bdaee8284af72259eab8b86033179aa26f7abf4756a589d8d745728bd6930486319f669f73a930219c787661cd8372cb1e40
SSDEEP

24576:3IhB4UiKHO9p6+6ol1Rb5OMy7SfZ7mrXphGduS9AzbOTVUze:3I9O9A+6kb5OMma6OwS9AzbEVUze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-08_00b612795ede35d052ad31adb229ab02_icedid

Files

2024-09-08_00b612795ede35d052ad31adb229ab02_icedid
.exe windows:5 windows x86 arch:x86

f7e70bac3637d6a52e1cbb4d826900e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
GetProcessHeap
SetEnvironmentVariableA
FindResourceW
SizeofResource
VirtualAlloc
VirtualProtect
LockResource
LoadResource
GetVersionExW
GetVersion
lstrlenA
GetCPInfo
FreeResource
lstrcmpiW
lstrlenW
SetLastError
GetLastError
GetProcAddress
LoadLibraryW
GetModuleHandleW
Sleep
WaitForSingleObject
SetEvent
CloseHandle
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadPriorityBoost
ExitProcess
GetModuleFileNameW
GetPrivateProfileStringW
InterlockedDecrement
GlobalReAlloc
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalSize
MulDiv
lstrcpynW
WritePrivateProfileStringW
GetTickCount
GetPrivateProfileIntW
GetVersionExA
lstrcmpW
FreeLibrary
LoadLibraryA
CompareStringW
GlobalDeleteAtom
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetStartupInfoW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
SetErrorMode
GetCurrentDirectoryW
GetSystemDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
GetProfileIntW
SystemTimeToFileTime
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetStringTypeExW
DeleteFileW
MoveFileW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GetThreadLocale
InterlockedIncrement
GlobalGetAtomNameW
GetCurrentProcessId
CreateEventW
SuspendThread
ResumeThread
SetThreadPriority
lstrcmpA
GetModuleHandleA
GlobalFree
CopyFileW
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
MultiByteToWideChar

user32

UnregisterClassW
CopyAcceleratorTableW
InvalidateRgn
PostThreadMessageW
GetNextDlgGroupItem
GetTabbedTextExtentA
CharNextW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcW
DefFrameProcW
GetWindowThreadProcessId
GetMessageW
ValidateRect
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
GetMenuStringW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
IsZoomed
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CallWindowProcW
GetMenu
SetWindowLongW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
EnumChildWindows
LockWindowUpdate
SetRectEmpty
GetClassNameW
GetDoubleClickTime
RedrawWindow
GetDCEx
IsRectEmpty
wsprintfW
GetClassLongW
BeginDeferWindowPos
EndDeferWindowPos
DrawMenuBar
IsWindowVisible
LoadMenuW
SetMenu
GetDlgCtrlID
SetWindowPos
LoadIconW
TranslateMessage
DispatchMessageW
OpenClipboard
GetClipboardData
CloseClipboard
MessageBeep
SetCapture
GetCapture
KillTimer
SetTimer
ScreenToClient
InvertRect
ReleaseCapture
ClipCursor
PtInRect
IntersectRect
GetMessagePos
IsClipboardFormatAvailable
GetCursorPos
EnableWindow
SendMessageW
GetMenuItemInfoW
GetSysColor
SystemParametersInfoW
GetClassInfoW
DefWindowProcW
LoadCursorW
GetKeyState
GetWindow
GetFocus
IsWindow
IsChild
SetFocus
UpdateWindow
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetWindowLongW
WindowFromPoint
SetParent
GetSystemMenu
SetWindowRgn
DrawIcon
CharUpperW
CreateDialogIndirectParamW
GetParent
GetNextDlgTabItem
GetActiveWindow
EndDialog
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
ShowOwnedPopups
RegisterClassW
PostQuitMessage
DestroyIcon
DrawIconEx
GetSystemMetrics
FillRect
GetSysColorBrush
SetRect
CopyRect
LoadBitmapW
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyCursor
IsMenu
SetCursor
PostMessageW
CreateIconIndirect
GetIconInfo
LoadImageW
InflateRect
OffsetRect
FrameRect
DrawStateW
DrawFocusRect
GetWindowRect
GetClientRect
ClientToScreen
InvalidateRect

gdi32

TextOutW
ExtTextOutW
Escape
GetStockObject
SetTextColor
SetBkColor
CreateBitmap
CreateFontW
GetCurrentObject
GetBkColor
GetTextMetricsW
StartDocW
StartPage
EndPage
AbortDoc
EndDoc
EnumFontFamiliesW
GetTextColor
GetClipBox
CopyMetaFileW
CreateDCW
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
RectVisible
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetPixel
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthW
StretchDIBits
CreateEllipticRgn
LPtoDP
SetAbortProc
GetViewportOrgEx
GetRgnBox
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
Rectangle
PtVisible
Ellipse
GetBkMode
GetDeviceCaps
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
CreateHatchBrush
CreatePen
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC
GetPixel
OffsetWindowOrgEx
PatBlt
GetViewportExtEx
GetTextExtentPoint32W

comdlg32

GetFileTitleW

winspool.drv

GetJobW
DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegOpenKeyExA
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueExA

shell32

DragFinish
DragQueryFileW
SHGetFileInfoW
ExtractIconW
ShellExecuteExW

comctl32

ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathFindFileNameW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleRun
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
StgCreateDocfileOnILockBytes
OleTranslateAccelerator

oleaut32

SysFreeString
VariantCopy
VariantInit
SysAllocString
VariantChangeType
OleLoadPicture
SysAllocStringLen
SysStringLen
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayGetElement
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7e70bac3637d6a52e1cbb4d826900e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 246KB - Virtual size: 245KB

.data Size: 27KB - Virtual size: 53KB

.rsrc Size: 204KB - Virtual size: 204KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 246KB - Virtual size: 245KB

.data
Size: 27KB - Virtual size: 53KB

.rsrc
Size: 204KB - Virtual size: 204KB